We help IT Professionals succeed at work.

lights on the swtich go erratic twice a day,  restart the server and it fine for a while

bsjld asked
Medium Priority
Last Modified: 2010-03-19
I have a 20 system network on a 24 port switch occasionally the lights gor crazy flashing eratic.  I unpluged each port and when I got to the server cable and pulled it out, it stopped.  When I restart the server everything goes fine untill it does it again.  It does it 2 to 3 times in a 8 hour day.  

What could cause this?  Others have said the nic is flooding the network, but no one offerd me any solutions.  Please Help
Watch Question

Are sure that it is the server. if you unplug the server it will work fine. because it could be the switch itself.
if it is the nic you may try to change it.

Also check if any unusual trafic to-from the server.

Joe RudSystems Administrator

I would use a packet sniffer and see what data is going across the wire at that time.

I can't recommend which sniffer is best, but one I know of is here: www.ethereal.com

The other people were right- you NEED to stop using that network card on the server.  Install a new network card


actually this is the 2nd card.  
 ethereal seems kinda hard to learn, what do i look for
Scott AndersonPrincipal Support Engineer

Have you tried plugging the Server network cable into another port on the switch, to rule out the Switchport?  Is the switch managed/can you get error counts/reports on each of the switch ports??
Erik BjersPrincipal Systems Administrator

SCAN YOUR SERVER FOR MALWARE.  If this is doing this with the second NIC you may have malware on your server that is sending out broadcast traffic.  Also Scooter has a point with the possible bad switchport.  Could also be faulty CAT5



the port is not managed, i will move to a different port.  I used spybot (free) is this adequate for malware?  It found some but it still doing it.

You need to check the system throughly, spybot won't be enough for servers. So things to check like:
- service that running -take a close look to the one that you suspect
- log files
- accounts and groups -look to the administrators one especially
- installed software
- open ports

ans so on
But I advise youto search the problem and to make a descision weather it is a software or hardware problem

hope this help!
Erik BjersPrincipal Systems Administrator

you should also run your scans in safemode this will prevent any viruses from interfearing with the scan.



ok, i will do that tonight, do you have any suggestions on software that will scan this thourouh.  I hav ca eturust anti virus, the enterprise version. I don't think this scan for all that though
there is no singale software that can do that for you. you CA etrust -which sometimes can't delete even a know viruses- will do the virus part for you. spybot or any other spyware removal may take care of the spyware. you may use windows defender to check running services and process. Even log is something that you need to check yourself. Also accounts and groups is something that you need to check and examine yourself.

if you see any suspecious services or programs then make sure to tigh the security. you may need to change admin pass and limit other accounts that have previlages to change the system.

hope this helps!

Not the solution you were looking for? Getting a personalized solution is easy.

Ask the Experts
Access more of Experts Exchange with a free account
Thanks for using Experts Exchange.

Create a free account to continue.

Limited access with a free account allows you to:

  • View three pieces of content (articles, solutions, posts, and videos)
  • Ask the experts questions (counted toward content limit)
  • Customize your dashboard and profile

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.


Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.